Zappos Headers

"Emphasis mine."<p>Heh... How exactly could the emphasis <i>not</i> be his? Last I checked the HTTP protocol didn't have any provision for emphasizing headers, so it couldn't have been the server that added the emphasis. ;-)

Reddit amuses me:<p><pre><code> 200 OK Connection: close Date: Wed, 21 Jul 2010 18:56:19 GMT Server: '; DROP TABLE servertypes; --</code></pre>

Well, that worked.

If you'd like to join in the header-sniffing fun, here's a bookmarklet that will show a site's HTTP headers in a popup: <a href="http://pastebin.com/pTDun3GT" rel="nofollow">http://pastebin.com/pTDun3GT</a>

Just for curiosity's sake, it would be interesting to have an estimate on how many extra gigabytes have been sent over time with these headers.

Also, the X-Core-Value number changes with each request (appears random).

Just for fun I've tried a script over the Alexa top 1M sites...<p>Strangest thing:<p><pre><code> www.vg.no X-VG-WebServer: leon X-VG-WebCache: dexter X-Rick-Would-Never: Know the Rules, and So Do I X-VG-Korken: http://www.youtube.com/watch?v=Fcj8CnD5188</code></pre>

Raanan.com (one of the Automattic staff) has a similar header - check out his X-hacker header:<p>"X-hacker: If you're reading this, you should visit automattic.com/jobs and apply to join the fun, mention this header."<p><a href="http://hurl.it/hurls/bf52ecc89d75c83ee8a68171bd624992607e1629/8af0ad1d9df2a2cbcb583024ecbdd0cb80afcf58" rel="nofollow">http://hurl.it/hurls/bf52ecc89d75c83ee8a68171bd624992607e162...</a>

Normally I would only look at the headers if there was a problem with the request.

I just had a phone interview with Zappos. I mentioned this. Thanks.

It was an interesting recruiting idea, but it's out there now.

Nice way to cut out the headhunters!

Zappos Head[<i>hunt</i>]ers

This is just awesome.